tracking: Session Management — observability, lifecycle control, and isolation

[thepagent]

Overview

Umbrella issue to track all session management related work in agent-broker.

Session Lifecycle

• feat: lightweight management API for session observability and lifecycle control #39 — lightweight management API for session observability and lifecycle control
• feat: /close command to manually terminate a thread session #40 — /close command to manually terminate a thread session
• Session timeout / auto-expiry — idle sessions auto-reclaimed after configurable TTL
• Session limits — max concurrent sessions per user/channel
• Graceful shutdown — handle in-flight sessions on broker restart

Session Isolation & Stability

• feat: per-thread isolated working directories #38 — per-thread isolated working directories
• fix: pool write lock held during entire prompt streaming causes cross-session deadlock #58 — fix: pool write lock held during entire prompt streaming causes cross-session deadlock

Session State

• Session persistence / recovery — restore sessions after broker crash
• Context window management — handle conversation history overflow (truncate / summarize)

Session Observability

• Session metrics — active count, avg lifetime, message count
• Session logging / audit trail — who created, when, which agent

Session Security & Access Control

• Session ownership — only session owner can operate their session
• Rate limiting per session — prevent single session from overwhelming agent

Multi-agent

• Session routing — ability to switch agent within a session
• Session handoff — transfer session from agent A to agent B with context

[chaodu-agent]

Hi @thepagent,

Good tracking issue — pairs well with RFC #78. Several items already have PRs in progress (#58/PR #77, #39/PR #57, #40/PR #42, #38/PR #41). Will keep this open as the umbrella tracker.